{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T17:16:58Z","timestamp":1779383818675,"version":"3.53.1"},"reference-count":48,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100003787","name":"Hebei Provincial Natural Science Foundation","doi-asserted-by":"publisher","award":["F2024203091"],"award-info":[{"award-number":["F2024203091"]}],"id":[{"id":"10.13039\/501100003787","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003787","name":"Hebei Provincial Natural Science Foundation","doi-asserted-by":"publisher","award":["F2025203045"],"award-info":[{"award-number":["F2025203045"]}],"id":[{"id":"10.13039\/501100003787","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003787","name":"Hebei Provincial Natural Science Foundation","doi-asserted-by":"publisher","award":["F2023203012"],"award-info":[{"award-number":["F2023203012"]}],"id":[{"id":"10.13039\/501100003787","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008095","name":"Yanshan University","doi-asserted-by":"publisher","award":["2025LGGH003"],"award-info":[{"award-number":["2025LGGH003"]}],"id":[{"id":"10.13039\/501100008095","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62306264"],"award-info":[{"award-number":["62306264"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62476235"],"award-info":[{"award-number":["62476235"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62173290"],"award-info":[{"award-number":["62173290"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004543","name":"China Scholarship Council","doi-asserted-by":"publisher","award":["202408130105"],"award-info":[{"award-number":["202408130105"]}],"id":[{"id":"10.13039\/501100004543","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Pattern Recognition"],"published-print":{"date-parts":[[2026,10]]},"DOI":"10.1016\/j.patcog.2026.113491","type":"journal-article","created":{"date-parts":[[2026,3,14]],"date-time":"2026-03-14T23:32:24Z","timestamp":1773531144000},"page":"113491","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["AttackCC-CDM: Stealthy backdoor attacks on crowd counting via crowd distribution manipulation"],"prefix":"10.1016","volume":"178","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1152-5817","authenticated-orcid":false,"given":"He","family":"Li","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-9377-2211","authenticated-orcid":false,"given":"Mimi","family":"Gu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-6588-7580","authenticated-orcid":false,"given":"Yuxuan","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1453-0603","authenticated-orcid":false,"given":"Weihang","family":"Kong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3377-7209","authenticated-orcid":false,"given":"Shihui","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.patcog.2026.113491_bib0001","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2025.111709","article-title":"Dual-branch adjacent connection and channel mixing network for video crowd counting","volume":"167","author":"Ling","year":"2025","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.patcog.2026.113491_bib0002","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2025.111420","article-title":"SENet: super-resolution enhancement network for crowd counting","volume":"162","author":"Liu","year":"2025","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.patcog.2026.113491_bib0003","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2024.111291","article-title":"RestoCrowd: image restoration coadjutant learning for hazy-weather crowd counting without weather labels","volume":"161","author":"Kong","year":"2025","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.patcog.2026.113491_bib0004","unstructured":"X. Chen, C. Liu, B. Li, K. Lu, D. Song, Targeted backdoor attacks on deep learning systems using data poisoning, (2017). arXiv: 1712.05526."},{"issue":"5","key":"10.1016\/j.patcog.2026.113491_bib0005","first-page":"2088","article-title":"Invisible backdoor attacks on deep neural networks via steganography and regularization","volume":"18","author":"Li","year":"2021","journal-title":"IEEE Trans. Dependable Secure. Comput."},{"key":"10.1016\/j.patcog.2026.113491_bib0006","series-title":"Proceedings of the 30Th ACM International Conference on Multimedia","first-page":"5351","article-title":"Backdoor attacks on crowd counting","author":"Sun","year":"2022"},{"key":"10.1016\/j.patcog.2026.113491_bib0007","series-title":"International Conference on Learning Representations","first-page":"1","article-title":"ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustness","author":"Geirhos","year":"2019"},{"key":"10.1016\/j.patcog.2026.113491_bib0008","series-title":"International Conference on Learning Representations","first-page":"1","article-title":"CausalAdv: adversarial robustness through the lens of causality","author":"Zhang","year":"2022"},{"key":"10.1016\/j.patcog.2026.113491_bib0009","series-title":"International Conference on Machine Learning","first-page":"19837","article-title":"Reconstructive neuron pruning for backdoor defense","author":"Li","year":"2023"},{"key":"10.1016\/j.patcog.2026.113491_bib0010","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"4466","article-title":"Enhancing fine-tuning based backdoor defense with sharpness-aware minimization","author":"Zhu","year":"2023"},{"key":"10.1016\/j.patcog.2026.113491_bib0011","series-title":"International Conference on Learning Representations","first-page":"1","article-title":"Stochastic security: adversarial defense using long-run dynamics of energy-based models","author":"Hill","year":"2021"},{"key":"10.1016\/j.patcog.2026.113491_bib0012","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2025.112766","article-title":"Generalizable poisoning-resistant backdoor detection and removal framework: from dataset perspective","volume":"172","author":"Li","year":"2026","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.patcog.2026.113491_bib0013","series-title":"Proceedings of IEEE Computer Society Conference on Computer Vision and Pattern Recognition","first-page":"I511- I518","article-title":"Rapid object detection using a boosted cascade of simple features","volume":"Vol. 1","author":"Viola","year":"2001"},{"issue":"8","key":"10.1016\/j.patcog.2026.113491_bib0014","doi-asserted-by":"crossref","first-page":"1532","DOI":"10.1109\/TPAMI.2014.2300479","article-title":"Fast feature pyramids for object detection","volume":"36","author":"Dollar","year":"2014","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.patcog.2026.113491_bib0015","first-page":"1","article-title":"Learning to count objects in images","volume":"23","author":"Lempitsky","year":"2011","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.patcog.2026.113491_bib0016","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"6142","article-title":"Bayesian loss for crowd count estimation with point supervision","author":"Ma","year":"2019"},{"key":"10.1016\/j.patcog.2026.113491_bib0017","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"19618","article-title":"Crowd counting in the frequency domain","author":"Shu","year":"2022"},{"key":"10.1016\/j.patcog.2026.113491_bib0018","series-title":"2025\u202fIEEE Wireless Communications and Networking Conference (WCNC)","first-page":"1","article-title":"A transformer-based multimodal fusion model for efficient crowd counting using visual and wireless signals","author":"Cui","year":"2025"},{"key":"10.1016\/j.patcog.2026.113491_bib0019","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"19628","article-title":"Boosting crowd counting via multifaceted attention","author":"Lin","year":"2022"},{"key":"10.1016\/j.patcog.2026.113491_bib0020","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"3395","article-title":"Gramformer: learning crowd counting via graph-modulated transformer","volume":"38","author":"Lin","year":"2024"},{"key":"10.1016\/j.patcog.2026.113491_bib0021","series-title":"Proceedings of the 2022\u202fACM SIGSAC Conference on Computer and Communications Security","first-page":"2055","article-title":"Harnessing perceptual adversarial patches for crowd counting","author":"Liu","year":"2022"},{"key":"10.1016\/j.patcog.2026.113491_bib0022","series-title":"Proceedings of the 29th ACM International Conference on Multimedia","first-page":"2195","article-title":"Towards adversarial patch analysis and certified defense against crowd counting","author":"Wu","year":"2021"},{"key":"10.1016\/j.patcog.2026.113491_bib0023","series-title":"European Conference on Computer Vision Workshops: Tel Aviv, Israel, October 23-27, 2022, Proceedings, Part I","first-page":"396","article-title":"BadDet: backdoor attacks on object detection","author":"Chan","year":"2022"},{"key":"10.1016\/j.patcog.2026.113491_bib0024","unstructured":"J. Lu, J. Shan, Z. Zhao, K.-H. Chow, AnywhereDoor: multi-target backdoor attacks on object detection, (2024). arXiv: 2411.14243."},{"key":"10.1016\/j.patcog.2026.113491_bib0025","first-page":"41778","article-title":"BadTrack: a poison-only backdoor attack on visual object tracking","volume":"36","author":"Huang","year":"2023","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.patcog.2026.113491_bib0026","series-title":"ICASSP 2025-2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","first-page":"1","article-title":"PB-UAP: hybride universal adversarial attack for image segmentation","author":"Song","year":"2025"},{"key":"10.1016\/j.patcog.2026.113491_bib0027","series-title":"Proceedings of the 2024 12th International Conference on Communications and Broadband Networking","first-page":"34","article-title":"Cross-prompt adversarial attack on segment anything model","author":"Liu","year":"2024"},{"key":"10.1016\/j.patcog.2026.113491_bib0028","series-title":"Proceedings of the 32nd ACM International Conference on Multimedia","first-page":"4110","article-title":"Backdoor attacks on bimodal salient object detection with RGB-thermal data","author":"Yin","year":"2024"},{"key":"10.1016\/j.patcog.2026.113491_bib0029","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"12733","article-title":"Physical backdoor: towards temperature-based backdoor attacks in the physical world","author":"Yin","year":"2024"},{"key":"10.1016\/j.patcog.2026.113491_bib0030","series-title":"International Joint Conference on Artificial Intelligence","first-page":"349","article-title":"BadFusion: 2D-oriented backdoor attacks against 3D object detection","author":"Chaturvedi","year":"2024"},{"key":"10.1016\/j.patcog.2026.113491_bib0031","unstructured":"T. Gu, B. Dolan-Gavitt, S. Garg, Badnets: Identifying vulnerabilities in the machine learning model supply chain, (2017). arXiv: 1708.06733."},{"key":"10.1016\/j.patcog.2026.113491_bib0032","first-page":"6103","article-title":"Poison frogs! targeted clean-label poisoning attacks on neural networks","volume":"31","author":"Shafahi","year":"2018","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.patcog.2026.113491_bib0033","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"11957","article-title":"Hidden trigger backdoor attacks","volume":"Vol. 34","author":"Saha","year":"2020"},{"key":"10.1016\/j.patcog.2026.113491_bib0034","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"14443","article-title":"Clean-label backdoor attacks on video recognition models","author":"Zhao","year":"2020"},{"key":"10.1016\/j.patcog.2026.113491_bib0035","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"16463","article-title":"Invisible backdoor attack with sample-specific triggers","author":"Li","year":"2021"},{"key":"10.1016\/j.patcog.2026.113491_bib0036","series-title":"Conference on Empirical Methods in Natural Language Processing and 9th International Joint Conference on Natural Language Processing","first-page":"2153","article-title":"Universal adversarial triggers for attacking and analyzing NLP warning: this paper contains model outputs which are offensive in nature","author":"Wallace","year":"2019"},{"key":"10.1016\/j.patcog.2026.113491_bib0037","first-page":"8000","article-title":"Spectral signatures in backdoor attacks","volume":"31","author":"Tran","year":"2018","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.patcog.2026.113491_bib0038","series-title":"\u202fIEEE Symposium on Security and Privacy","first-page":"707","article-title":"Neural cleanse: identifying and mitigating backdoor attacks in neural networks","author":"Wang","year":"2019"},{"key":"10.1016\/j.patcog.2026.113491_bib0039","series-title":"International Symposium on Research in Attacks, Intrusions, and Defenses","first-page":"273","article-title":"Fine-pruning: defending against backdooring attacks on deep neural networks","author":"Liu","year":"2018"},{"key":"10.1016\/j.patcog.2026.113491_bib0040","series-title":"6th International Conference on Learning Representations, ICLR 2018 - Conference Track Proceedings","first-page":"1","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2018"},{"key":"10.1016\/j.patcog.2026.113491_bib0041","series-title":"2023\u202fIEEE 33rd International Workshop on Machine Learning for Signal Processing (MLSP)","first-page":"1","article-title":"Scale selection network with attention mechanism for crowd counting","author":"Lai","year":"2023"},{"key":"10.1016\/j.patcog.2026.113491_bib0042","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","first-page":"589","article-title":"Single-image crowd counting via multi-column convolutional neural network","author":"Zhang","year":"2016"},{"key":"10.1016\/j.patcog.2026.113491_bib0043","series-title":"Proceedings of the European Conference on Computer Vision (ECCV)","first-page":"532","article-title":"Composition loss for counting, density map estimation and localization in dense crowds","author":"Idrees","year":"2018"},{"issue":"5","key":"10.1016\/j.patcog.2026.113491_bib0044","first-page":"2594","article-title":"JHU-CROWD++: large-scale crowd counting dataset and a benchmark method","volume":"44","author":"Sindagi","year":"2022","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.patcog.2026.113491_bib0045","series-title":"International Conference on Pattern Recognition","first-page":"2366","article-title":"Image quality metrics: PSNR vs. SSIM","author":"Hore","year":"2010"},{"key":"10.1016\/j.patcog.2026.113491_bib0046","first-page":"12077","article-title":"SegFormer: simple and efficient design for semantic segmentation with transformers","volume":"34","author":"Xie","year":"2021","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.patcog.2026.113491_bib0047","series-title":"IEEE Conference on Computer Vision and Pattern Recognition","first-page":"86","article-title":"Universal adversarial perturbations","author":"Moosavi-Dezfooli","year":"2017"},{"key":"10.1016\/j.patcog.2026.113491_bib0048","series-title":"International Conference on Learning Representations","first-page":"1","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2018"}],"container-title":["Pattern Recognition"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0031320326004577?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0031320326004577?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T16:55:56Z","timestamp":1779382556000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0031320326004577"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10]]},"references-count":48,"alternative-id":["S0031320326004577"],"URL":"https:\/\/doi.org\/10.1016\/j.patcog.2026.113491","relation":{},"ISSN":["0031-3203"],"issn-type":[{"value":"0031-3203","type":"print"}],"subject":[],"published":{"date-parts":[[2026,10]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"AttackCC-CDM: Stealthy backdoor attacks on crowd counting via crowd distribution manipulation","name":"articletitle","label":"Article Title"},{"value":"Pattern Recognition","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.patcog.2026.113491","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"113491"}}